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CONTROL DEVICE FOR A SYSTEM, AND METHOD FOR 
OPERATING THE CONTROL DEVICE 

FIELD OF THE INVENTION 

The present invention relates to a control device for a system, and to a method 
for operating the control device. 

5 BACKGROUND INFORMATION 

International Patent Publication No. WO 97/13064 describes a control device for 
a system and a method for operating a control device in which a plurality of 
activatable modules are provided. These modules are activated by a scheduler 
which takes into account priorities that are assigned to the modules. In this 

HO context, however, the priorities assigned to the modules are fixed and cannot be 

H 8 modified. 

I l s 

;| SUMMARY OF THE INVENTION 

m The control device according to the present invention and the method according 

L1 5 to the present invention for operating the control device have the advantage 
!z[ that the sequence control system for the modules is improved as a result of 

Ul modifiable priorities. In this fashion, in particular, a plurality of modifiable 

jJS conditions can be taken into account for the sequence control system, i.e. for 

activating and executing modules. 

20 

By taking into account the time period during which the particular module is 
activated or deactivated, it is possible to ensure that modules which have not 
been executed for some time or have been executed quite recently are taken 
into consideration accordingly. By taking into account system states, the priority 

25 of modules can be made dependent on external states. In an advantageous 
manner, both methods are linked to one another so as to ensure the greatest 
possible flexibility in the activation of modules. Increasing the priority upon 
activation ensures that a certain minimum run time is available to modules. By 
taking into account the absolute time, it is possible to implement positive run 

30 conditions which depend on an absolute time signal. Advantageously, the 
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scheduler follows a selection process for the modules in which higher-priority 
modules are given preferred consideration. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows a control device and a system according to the present 
invention. 

Figure 2 shows a first graph for allocating priorities to modules. 
Figure 3 shows a second graph for allocating the priorities to the modules. 
Figure 4 shows a third graph for allocating the priorities to the modules. 
Figure 5 shows a first step for a selection process using a scheduler. 
Figure 6 shows a second step for the selection process using the scheduler. 
Figure 7 shows a third step for the selection process using the scheduler. 
Figure 8 shows a fourth step for the selection process using the scheduler. 
DETAILED DESCRIPTION 

Figure 1 shows a control device 1 which is connected via connecting lines 4 to 
a system 2 to be controlled. Control device 1 has a microcomputer 3 which is 
provided for the execution of modules 10, 11, 12. Module 10 represents a 
plurality of modules, which are functional modules. Such functional modules 10 
are provided in order to control or diagnose system 2. Module 1 1 is a scheduler, 
and module 12 is a module which acts as priority manager. 

System 2 can be any desired technical system which is controlled by a control 
device J ^For exam ple, system 2 can be a motor vehicle, an internal combustion 

engin e, or a tran smission. Such system 2 is equipped with a plurality of sensors 
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and a plurality of actuators. Actuation data generated by control device 1 can be 
transmitted via connecting lines 4 to the actuators of system 2 (arrow pointing 
toward system 2). In addition, measured values of sensors of system 2 can be 
transferred via connecting lines 4 to control device 1 (arrow pointing toward 
5 control device 1). Control device 1 thus receives data concerning states of 

system 2 which are processed by control device 1 and converted, as a function 
of desired states (for example, accelerator pedal position in a motor vehicle), 
into control data for system 2. 

10 Control device 1 is schematically illustrated with multiple modules 10, 11, 12 
and microcomputer 3. Other hardware components usually used for control 
device 1 are not illustrated herein. Modules 10, 11, 12 are usually configured as 
m program modules, but hardware modules which perform the corresponding 

0 functions can also be used. A function module 10 configured as a program 

jyp 5 module is a sequence of program instructions which are activated or deactivated 
-t: as a unit by scheduler 1 1 . In this context, functions which present themselves 

yB to the user as a unit or are used to control a unified function can be divided into 

multiple modules managed separately by scheduler 11. Function modules 10 are 
;!! required for the processing of direct control tasks or diagnostic tasks. These 

□0 modules analyze control data of system 2, and as a function of predefined 
iH setpoints generate corresponding control data for system 2. An input signal of a 

m function module of this kind can consist, for example in a motor vehicle, o f the 

^ engin^ speed and the setpoint information in the gas pedal position, from which 
a corresponding control datum for the engine is then generated. Function 
25 modules 10 which monitor proper operation of system 2 can also be provided. 

In a motor vehicle, for example, the functionality of the catalytic converter must 
be checked during vehicle operation based on regulatory stipulations. This is 
done by activating, from time to time, a corresponding function module 10 
which checks the operation of the catalyst by analyzing signals from the lambda 
30 probe. 

Function modules 10 can be in the active or inactive state. In the inactive state, 
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the tasks connected with the module, such as diagnosis or control of elements 
of the system, are not executed. This means in particular that inactive modules 
read in data from the system only to test their readiness to operate, and that no 
data are output to system 2. In the inactive state, however, the modules can 
5 still exchange data with, for example, microcomputer 3. In particular, it should 
still be possible to exchange data between function modules 10 and scheduler 
1 1 data concerning the activation of a module (e.g. activation capability or 
request). Since not all function modules 10 are required in every operating state 
of system 2, at least a portion of those modules can be inactivated. Activation 
10 of the individual function modules is accomplished by way of a sequence control 
system which decides which function modules 10 to execute. Scheduler 1 1 and 
priority manager 12 are part of this sequence control system. The sequence 
control system can make the activation of individual function modules 

o 

\!1 dependent upon specific external conditions. For example, function modules 10 

jfl 5 which have to do, for example, with the ignition or fuel injection systems of a 
4] gasoline engine are activated as a function of the crankshaft position of the 

«n engine. Similarly, function modules 10 which have to do with the diagnosis of 

til 

~ system 2 are activated as a function of operating states of system 2. What is 

;;f essential here is that multiple function modules 10 can be processed 

^20 concurrently, meaning that the processing of one module is not yet complete 
|« while a different module is also being processed simultaneously. A 

03 microcomputer 3 can only execute a single instruction which is assigned to a 

specific module. Simultaneous processing thus means, in this context, that 
modules which are being processed simultaneously are provided for the 
25 allocation of computing time, so that the functions connected with the 
corresponding modules are performed. 

Scheduler 1 1 and priority manager 12 are part of the sequence control system 
which decides which modules are activated and which are not. In this context, 
30 it is the task of priority manager 12 to assign priorities to function modules 10 
and to modify those priorities for sequence control purposes. The task of 
scheduler 1 1 is then to decide, as a function of those priorities, which function 
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modules 10 are in the active state and which function modules 10 are in the 
inactive state. The ways in which priority manager 12 operates are explained 
below with reference to Figures 2 through 4. 

5 In Figure 2, priority p is plotted against a time t on a diagram. What is plotted as 
time t here is the time during which a module is in a specific state, i.e. either 
active or inactive. The diagram in Figure 2 shows, as examples, the priorities of 
modules A and B. In addition, an alternative illustration A' is shown with 
reference to module A. Module B serves only as a comparison module, and is 
10 therefore depicted as having a constant priority over the entire time period. At 
time tO, module A has a priority 0. This time tO can be defined, for example, by 
the fact that at that time, module A has informed the sequence control system, 
_ i.e. either scheduler 1 1 or priority manager 12, that it is now ready to run. Time 

?S t is then therefore to be understood as a waiting time, since priority manager 1 2 

I r 1 5 is continuously increasing the priority of module A. At time t1 , the priority of 
f 2 module A then exceeds the constant priority of module B, so that at time t1, 

:fl scheduler 1 1 will activate module A and shift module B into an inactive state. 

This applies, of course, only on the assumption that modules A and B are ready 
5^ to run, but must not run simultaneously. Priority manager 1 2 thus assigns a 

(E20 priority to module A as a function of a time period. 

ffl A further possibility for assigning priorities to a module results from the 

comparison of module A and module A'. The priority profiles depicted in Figure 
2 for modules A and A' differ in terms of the increase in priority per unit time. 

25 Module A' is not activated until a much later time t2, since the priority increase 
for this module A' is less than the priority increase of module A. The difference 
in slopes results from the fact that the waiting time t is additionally associated 
(for example, by multiplication) with the intensity of a state of system 2. The 
state of system 2 envisioned here is, in particular, the intensity of a sensor 

30 signal of system 2. The more intense the measured value of the sensor of 

system 2, the greater the slope of the priority of module A or A'. A nonlinear 
profile for the priority of A or A' may also result in this case. 
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A further possibility for assigning a priority to the modules consists in assigning 
the modules a priority exclusively as a function of a sensor signal. In the case of 
an engine, for example, provision could be made for the priority of a module to 
be associated directly with the engine speed, i.e. the higher the engine speed, 
5 the higher the priority of a specific module becomes. 

Figure 3 shows a further method with which priority manager 1 2 allocates a 
priority to a module A. In Figure 3 as well, a module B with constant priority is 
shown for comparison. In the case of module A shown in Figure 3, the priority 
10 once again increases linearly between times tO and t3 as a function of the 

waiting time t. At time t3, module A is activated by scheduler 1 1. The priority 
manager then abruptly assigns an increased priority to module A. This is 
„ necessary in order to ensure that module A is now processed for a specific time. 

u3 This is necessary in particular if the competing module B does not, as shown 

jl=p5 here, have a constant priority but rather itself has a priority which rises slightly 

over time; or if, as depicted in Figure 3, the priority of module A decreases 
^0 slightly after activation of module A (time period following time t3). The reason 

is that in both of these cases, there would otherwise be a continuous switching 
Li back and forth between module A and module B, i.e. module A would be 

t^O respectively activated and then deactivated at short time intervals. Priority 
^ manager 12 is therefore designed so that when a module is activated, an 

^ increase in priority is abruptly applied in order to achieve a certain hysteresis in 

the switching back and forth between modules of similar priority. 

25 A further manner in which the priority manager can allocate a priority to a 

module A is shown in Figure 4. In Figure 4, an absolute time - for example an 
absolute time after a motor vehicle has been started - is plotted on the time axis 
t. The absolute times t4 and t5 define a time window, module A being given a 
very high priority within this time window. With a priority assignment of this 

30 kind, it is possible to execute a module preferentially as a function of an 

absolute time. Outside this time window, the priority of module A can then be 
managed in a conventional manner, for example by continuously increasing the 
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priority with a waiting time of module A, as also shown in Figure 4. An absolute 
time window of this kind is desirable, for example, if specific function modules 
absolutely must be executed in specific time windows. This is the case, for 
example, with specific diagnostic functions such as those used for motor 
5 vehicles. It is necessary in this case to ensure that for standardized tests, which 
often contain only a single time window that is suitable for a specific function 
test, the function modules associated therewith are also executed. Outside the 
time window, provision is again made, by way of a normal priority assignment 
based on waiting time or the like, for the corresponding function modules to be 
10 invoked at least occasionally. 

As a function of the priorities that were assigned by priority manager 12 to the 
^ individual function modules 10, scheduler 11 then determines which modules 

are activated and which modules are inactivated. This is done, for example, by 
jjfl 5 activating scheduler module 1 1 at regular time intervals and then activating or 
^ deactivating function modules 10 as a function of the priorities. Another 

:fl possibility may consist in always activating scheduler module 1 1 when a 

ill 

,~ function module 10 completes its activity, since at that point as well, another 

JIT decision can be made as to which modules can and cannot then run. Another 

G20 possibility for invoking scheduler 1 1 consists in making the activation of 

scheduler module 1 1 dependent on external signals, for example sensor signals 

of system 2. 



An explanation will now be given, with reference to Figures 5-8, as to how 
25 scheduler module selects the modules to be activated as a function of the 
priorities of function modules A, B, C, D, E, F, G, and H. From the set of 
modules A through H, shown in Figure 5, that are ready to run, i.e. awaiting 
activation, the module with the highest priority is selected first. In the present 
case this is module A, which is shown in Figure 5 by a circle. Scheduler module 
30 11 then determines whether further modules are present which must not run 
simultaneously with module A. This may be due, for example, to the fact that 
module A accesses specific actuators and no other modules must influence 



7 



those actuators at the same time. It may also be the case that module A 
influences sensor values which are required by other modules. 
Interdependencies of this kind between modules can be stored, for example, in a 
list which scheduler 1 1 can access. In the present case, for example, the 
5 behavior is such that modules C and E must not be active simultaneously with 

module A. These modules are therefore deleted from the set, as shown in Figure 
6. What then remains is a residual set in which module A which has already 
been selected, and the deleted modules C and E which must not be activated 
together with module A, are no longer present. In the present example this set is 
10 constituted by elements B, D, F, G, and H. From this residual set, the module 
with the highest priority - in the present example, module D - is once again 
selected. As shown in Figure 7, modules B and H must not be activated 
^ simultaneously with module D, so those modules are also deleted. The 

n remaining residual set, with modules D and F, again no longer contains the 

3 5 deleted modules and the modules already selected. In this residual set, module D 
2 has a higher priority than module F, so that module D is selected in the next 

O step. The residual set which now remains contains only module F, which may 

be activated simultaneously with module D, s that in the last step (see Figure 8), 
;f module F is also selected for activation. Scheduler 1 1 has thus also determined 

:20 that modules A, D, G, and F are to be active because of the priorities and 
~ interdependencies. If one of the modules that has now been deleted was 

B activated prior to this determination, scheduler 1 1 transfers that module into a 

deactivated state. If one of the selected modules was previously deactivated, 
that module is transferred by scheduler 1 1 into the activated state. 

25 

If it happens, in the aforesaid cases in which scheduler 1 1 must select a module 
with the highest priority, that more than one module possesses the same 
highest priority, the scheduler can then create a sequence for those 
equal-priority modules using any desired further criteria. In Figures 5-8, for 
30 example, alphabetical order (assuming equal priority) can be utilized for the 
decision. 
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